diff --git a/etc/unbound/unbound.conf.d/dot-adguard.conf b/etc/unbound/unbound.conf.d/dot-adguard.conf deleted file mode 100644 index b2bd5023..00000000 --- a/etc/unbound/unbound.conf.d/dot-adguard.conf +++ /dev/null @@ -1,28 +0,0 @@ -server: - # Debian ca-certificates location - #tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt - # Fedora - #tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem - # Use system certificates no matter where they are - tls-system-cert: yes - # Quad9 says pointless performance impact on forwarders. - # https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization - qname-minimisation: no - -forward-zone: - name: "." - forward-tls-upstream: yes - # AdGuard with AdBlocking - forward-addr: 2a10:50c0::ad1:ff@853#dns.adguard.com - forward-addr: 94.140.14.14@853#dns.adguard.com - forward-addr: 2a10:50c0::ad2:ff@853#dns.adguard.com - forward-addr: 94.140.15.15@853#dns.adguard.com - # AdGuard Public DNS without filtering - #forward-addr: 2a10:50c0::1:ff@853#unfiltered.adguard-dns.com - #forward-addr: 2a10:50c0::2:ff@853#unfiltered.adguard-dns.com - #forward-addr: 94.140.14.140@853#unfiltered.adguard-dns.com - #forward-addr: 94.140.14.141@853#unfiltered.adguard-dns.com - -# Updated for https://adguard.com/en/blog/adguard-dns-new-addresses.html - -# vim: filetype=unbound.conf diff --git a/etc/unbound/unbound.conf.d/dot-cloudflare.conf b/etc/unbound/unbound.conf.d/dot-cloudflare.conf deleted file mode 100644 index 7d55baa9..00000000 --- a/etc/unbound/unbound.conf.d/dot-cloudflare.conf +++ /dev/null @@ -1,34 +0,0 @@ -server: - # Debian ca-certificates location - #tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt - # Fedora - #tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem - # Use system certificates no matter where they are - tls-system-cert: yes - # Quad9 says pointless performance impact on forwarders. - # https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization - qname-minimisation: no - -forward-zone: - name: "." - forward-tls-upstream: yes - - # Default / unfiltered - #forward-addr: 2606:4700:4700::1111@853#cloudflare-dns.com - #forward-addr: 2606:4700:4700::1001@853#cloudflare-dns.com - #forward-addr: 1.1.1.1@853#cloudflare-dns.com - #forward-addr: 1.0.0.1@853#cloudflare-dns.com - - # Malware blocking - forward-addr: 2606:4700:4700::1112@853#security.cloudflare-dns.com - forward-addr: 2606:4700:4700::1002@853#security.cloudflare-dns.com - forward-addr: 1.1.1.2@853#security.cloudflare-dns.com - forward-addr: 1.0.0.2@853#security.cloudflare-dns.com - - # Malware and adult content blocking - #forward-addr: 2606:4700:4700::1113@853#family.cloudflare-dns.com - #forward-addr: 2606:4700:4700::1003@853#family.cloudflare-dns.com - #forward-addr: 1.1.1.3@853#family.cloudflare-dns.com - #forward-addr: 1.0.0.3@853#family.cloudflare-dns.com - -# vim: filetype=unbound.conf diff --git a/etc/unbound/unbound.conf.d/dot-dns4eu.conf b/etc/unbound/unbound.conf.d/dot-dns4eu.conf deleted file mode 100644 index 81583117..00000000 --- a/etc/unbound/unbound.conf.d/dot-dns4eu.conf +++ /dev/null @@ -1,44 +0,0 @@ -# https://joindns4.eu - public DNS resolver primarily for European users from -# the European Union - -server: - # Debian ca-certificates location - #tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt - # Fedora - #tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem - # Use system certificates no matter where they are - tls-system-cert: yes - # Quad9 says pointless performance impact on forwarders. - # https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization - qname-minimisation: no - -forward-zone: - name: "." - forward-tls-upstream: yes - # DNS4EU Unfiltered - #forward-addr: 2a13:1001::86:54:11:200@853#unfiltered.joindns4.eu - #forward-addr: 2a13:1001::86:54:11:100@853#unfiltered.joindns4.eu - #forward-addr: 86.54.11.200@853#unfiltered.joindns4.eu - #forward-addr: 86.54.11.100@853#unfiltered.joindns4.eu - # DNS4EU Protective - #forward-addr: 2a13:1001::86:54:11:201@853#protective.joindns4.eu - #forward-addr: 2a13:1001::86:54:11:1@853#protective.joindns4.eu - #forward-addr: 86.54.11.201@853#protective.joindns4.eu - #forward-addr: 86.54.11.1@853#protective.joindns4.eu - # DNS4EU Child Protection and Adblocking - #forward-addr: 2a13:1001::86:54:11:211@853#child-noads.joindns4.eu - #forward-addr: 2a13:1001::86:54:11:11@853#child-noads.joindns4.eu - #forward-addr: 86.54.11.211@853#child-noads.joindns4.eu - #forward-addr: 86.54.11.11@853#child-noads.joindns4.eu - # DNS4EU Child Protection - #forward-addr: 2a13:1001::86:54:11:212@853#child.joindns4.eu - #forward-addr: 2a13:1001::86:54:11:12@853#child.joindns4.eu - #forward-addr: 86.54.11.212@853#child.joindns4.eu - #forward-addr: 86.54.11.12@853#child.joindns4.eu - # DNS4EU Adblocking - forward-addr: 2a13:1001::86:54:11:213@853#noads.joindns4.eu - forward-addr: 2a13:1001::86:54:11:13@853#noads.joindns4.eu - forward-addr: 86.54.11.213@853#noads.joindns4.eu - forward-addr: 86.54.11.13@853#noads.joindns4.eu - -# vim: filetype=unbound.conf diff --git a/etc/unbound/unbound.conf.d/dot-eu-gdpr.conf b/etc/unbound/unbound.conf.d/dot-eu-gdpr.conf deleted file mode 120000 index ee31ae27..00000000 --- a/etc/unbound/unbound.conf.d/dot-eu-gdpr.conf +++ /dev/null @@ -1 +0,0 @@ -dot-dns4eu.conf \ No newline at end of file diff --git a/etc/unbound/unbound.conf.d/dot-google.conf b/etc/unbound/unbound.conf.d/dot-google.conf deleted file mode 100644 index a3191f01..00000000 --- a/etc/unbound/unbound.conf.d/dot-google.conf +++ /dev/null @@ -1,25 +0,0 @@ -server: - # Debian ca-certificates location - #tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt - # Fedora - #tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem - # Use system certificates no matter where they are - tls-system-cert: yes - # Quad9 says pointless performance impact on forwarders. - # https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization - qname-minimisation: no - -forward-zone: - name: "." - forward-tls-upstream: yes - # Google Public DNS - forward-addr: 2001:4860:4860::8844@853#dns.google - forward-addr: 2001:4860:4860::8888@853#dns.google - forward-addr: 8.8.4.4@853#dns.google - forward-addr: 8.8.8.8@853#dns.google - - # Google DNS64 - #forward-addr: 2001:4860:4860::6464@853#dns64.dns.google - #forward-addr: 2001:4860:4860::64@853#dns64.dns.google - -# vim: filetype=unbound.conf diff --git a/etc/unbound/unbound.conf.d/dot-mullvad.conf b/etc/unbound/unbound.conf.d/dot-mullvad.conf deleted file mode 100644 index d6295d1e..00000000 --- a/etc/unbound/unbound.conf.d/dot-mullvad.conf +++ /dev/null @@ -1,34 +0,0 @@ -server: - # Debian ca-certificates location - #tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt - # Fedora - #tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem - # Use system certificates no matter where they are - tls-system-cert: yes - # Quad9 says pointless performance impact on forwarders. - # https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization - qname-minimisation: no - -forward-zone: - name: "." - forward-tls-upstream: yes - # Unfiltered - #forward-addr: 194.242.2.2@853#dns.mullvad.net - #forward-addr: 2a07:e340::2@853#dns.mullvad.net - # Adblock and tracking protection - #forward-addr: 194.242.2.3@853#adblock.dns.mullvad.net - #forward-addr: 2a07:e340::3@853#adblock.dns.mullvad.net - # Above + malware protection - forward-addr: 194.242.2.4@853#base.dns.mullvad.net - forward-addr: 2a07:e340::4@853#base.dns.mullvad.net - # Above + social media blocking - #forward-addr: 194.242.2.5@853#extended.dns.mullvad.net - #forward-addr: 2a07:e340::5@853#extended.dns.mullvad.net - # Blocking for ads, trackers, malware, adult, gambling - #forward-addr: 194.242.2.6@853#family.dns.mullvad.net - #forward-addr: 2a07:e340::6@853#family.dns.mullvad.net - # Blocking all of the above - #forward-addr: 194.242.2.9@853#all.dns.mullvad.net - #forward-addr: 2a07:e340::9@853#all.dns.mullvad.net - -# vim: filetype=unbound.conf diff --git a/etc/unbound/unbound.conf.d/dot-quad9.conf b/etc/unbound/unbound.conf.d/dot-quad9.conf deleted file mode 100644 index 61c117b5..00000000 --- a/etc/unbound/unbound.conf.d/dot-quad9.conf +++ /dev/null @@ -1,56 +0,0 @@ -# https://docs.quad9.net/services/ -# https://www.trex.fi/service/resolvers.html - says they don't provide -# encryption, but host a Quad9 node and giving these addresses instead. - -server: - # Debian ca-certificates location - #tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt - # Fedora - #tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem - # Use system certificates no matter where they are - tls-system-cert: yes - # Quad9 says pointless performance impact on forwarders. - # https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization - qname-minimisation: no - -forward-zone: - name: "." - forward-tls-upstream: yes - ## Secure - #forward-addr: 2620:fe::fe@853#dns.quad9.net - #forward-addr: 2620:fe::fe@8853#dns.quad9.net - #forward-addr: 2620:fe::9@853#dns.quad9.net - #forward-addr: 2620:fe::9@8853#dns.quad9.net - #forward-addr: 9.9.9.9@853#dns.quad9.net - #forward-addr: 9.9.9.9@8853#dns.quad9.net - #forward-addr: 149.112.112.112@853#dns.quad9.net - #forward-addr: 149.112.112.112@8853#dns.quad9.net - ## No Threat Blocking - #forward-addr: 2620:fe::fe:10@853#dns10.quad9.net - #forward-addr: 2620:fe::fe:10@8853#dns10.quad9.net - #forward-addr: 149.112.112.10@853#dns10.quad9.net - #forward-addr: 149.112.112.10@8853#dns10.quad9.net - #forward-addr: 2620:fe::10@853#dns10.quad9.net - #forward-addr: 2620:fe::10@8853#dns10.quad9.net - #forward-addr: 9.9.9.10@853#dns10.quad9.net - #forward-addr: 9.9.9.10@8853#dns10.quad9.net - ## Secure + ECS - forward-addr: 2620:fe::fe:11@853#dns11.quad9.net - forward-addr: 2620:fe::fe:11@8853#dns11.quad9.net - forward-addr: 9.9.9.11@853#dns11.quad9.net - forward-addr: 9.9.9.11@8853#dns11.quad9.net - forward-addr: 2620:fe::11@853#dns11.quad9.net - forward-addr: 2620:fe::11@8853#dns11.quad9.net - forward-addr: 149.112.112.11@853#dns11.quad9.net - forward-addr: 149.112.112.11@8853#dns11.quad9.net - ## No Threat Blocking + ECS - #forward-addr: 2620:fe::fe:12@853#dns12.quad9.net - #forward-addr: 2620:fe::fe:12@8853#dns12.quad9.net - #forward-addr: 9.9.9.12@853#dns12.quad9.net - #forward-addr: 9.9.9.12@8853#dns12.quad9.net - #forward-addr: 2620:fe::12@853#dns12.quad9.net - #forward-addr: 2620:fe::12@8853#dns12.quad9.net - #forward-addr: 149.112.112.12@853#dns12.quad9.net - #forward-addr: 149.112.112.12@8853#dns12.quad9.net - -# vim: filetype=unbound.conf